Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
File: ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json)
Hash identifier: 7ggpahCjrNVssUHCqeftiGGmhwAU8qTwjr0K/+pA2H4=
Subject key identifier: 4F:46:08:07:0B:DE:1E:0B:58:5D:F5:66:D0:22:FB:3C:FE:DD:2F:EC
Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
Certificate issuer: /CN=102bc98d33270952534130afb4de696d8c340215
Certificate serial: 019916BFAC86309FE5D8E234DF8A33EBA3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
Manifest number: 065D
Signing time: Thu 04 Sep 2025 22:01:23 +0000
Manifest this update: Thu 04 Sep 2025 22:01:23 +0000
Manifest next update: Fri 05 Sep 2025 22:01:23 +0000
Files and hashes: 1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=)
2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: TEEtb2IBrGhV+OJ03AXcRrnotQfgIdhlmJcqSdQnynY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:ac:86:30:9f:e5:d8:e2:34:df:8a:33:eb:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102bc98d33270952534130afb4de696d8c340215
Validity
Not Before: Sep 4 22:01:23 2025 GMT
Not After : Sep 5 22:01:23 2025 GMT
Subject: CN=4f4608070bde1e0b585df566d022fb3cfedd2fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:53:fd:92:99:06:7c:2b:af:78:15:2d:0d:
e7:dd:08:15:ce:d1:7d:05:dc:3a:49:a9:8d:fb:0f:
f6:cd:26:0c:4f:1a:ae:ea:25:7a:d6:1d:10:8f:1a:
65:3c:89:d3:3d:57:1d:e1:30:f9:6e:af:bd:f9:9f:
12:e2:a9:64:cd:ae:b6:05:d7:ed:b6:7e:31:1b:45:
fb:01:98:8f:cf:27:9a:7a:77:02:ba:eb:cc:81:4c:
e7:cb:a6:fc:73:2b:f6:19:c1:42:d0:38:fc:6d:f2:
37:22:09:c5:4c:d5:45:d5:26:65:7a:04:4a:cb:ea:
5e:87:21:40:74:b9:bd:a5:8d:c8:86:4a:1c:77:2a:
58:fd:fb:7f:0f:e6:68:4c:fa:9a:51:2d:b9:fd:bf:
2e:dd:6c:d8:ef:d4:cf:6a:c3:ad:8b:c5:90:11:39:
83:10:74:65:0a:4a:e3:73:9f:d1:37:55:37:59:90:
dd:eb:84:d1:d1:5c:f1:12:80:64:c3:bc:ab:cf:09:
ff:3e:a0:88:f8:bb:73:6e:c9:23:70:80:4f:be:e6:
fb:40:68:42:17:01:f2:7d:38:5d:34:3a:ca:9c:5f:
fa:64:8a:d8:6f:41:83:c0:1e:21:96:d0:f6:c2:2c:
a1:49:9e:ae:d9:a1:b9:ef:78:0b:ac:da:a7:ac:9e:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:08:07:0B:DE:1E:0B:58:5D:F5:66:D0:22:FB:3C:FE:DD:2F:EC
X509v3 Authority Key Identifier:
keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:53:41:07:39:40:6d:b8:bb:52:17:97:b1:c1:fa:c0:e5:
0e:64:4e:71:48:0f:92:75:f5:f3:63:a1:32:14:18:bf:1f:e9:
49:f7:90:2b:e1:64:29:08:44:6f:2a:97:04:f6:73:22:18:2b:
34:a1:c6:c6:61:7b:47:7c:db:34:ff:c3:9e:9a:f3:7b:de:dd:
e3:67:29:77:2a:ed:80:f1:46:ef:2c:a8:84:7e:2d:cb:aa:b3:
4a:85:12:02:50:95:23:80:3e:08:a8:a2:c4:12:24:35:b9:d8:
10:d8:5c:d2:a2:7c:fd:54:5b:bd:cf:79:71:39:f5:ea:5a:2c:
a4:37:68:1f:41:d1:e1:36:97:cf:a7:b7:53:5a:fe:36:2f:19:
c0:06:dd:9e:f6:b7:e7:34:ce:9f:b2:b1:2b:1a:08:8e:7e:ca:
61:f0:02:47:0a:ee:93:a5:15:89:31:86:3a:6c:35:e3:2c:b1:
86:c3:97:26:be:96:3b:96:c4:ef:05:fa:5d:21:5e:0b:a4:54:
ea:95:6a:ec:79:52:c7:33:87:1e:8c:d1:f3:de:2f:40:79:80:
20:45:ef:61:14:56:fe:62:c8:a6:48:64:a8:7b:23:95:63:6a:
09:39:aa:c0:b0:27:0c:63:bf:0d:ef:56:1a:15:e5:1b:7b:0e:
83:61:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:54 2025 by rpki-client